Re: [PATCH] drm/ioc32: stop speculation on the drm_compat_ioctl path

[Thomas Zimmermann]

Am 02.04.26 um 08:32 schrieb Greg Kroah-Hartman:
> On Thu, Apr 02, 2026 at 08:20:27AM +0200, Thomas Zimmermann wrote:
> > Am 24.03.26 um 17:42 schrieb Greg Kroah-Hartman:
> > > The drm compat ioctl path takes a user controlled pointer, and then
> > > dereferences it into a table of function pointers, the signature method
> > > of spectre problems.  Fix this up by calling array_index_nospec() on the
> > > index to the function pointer list.
> > >
> > > Cc: Maarten Lankhorst <maarten.lankhorst@xxxxxxxxxxxxxxx>
> > > Cc: Maxime Ripard <mripard@xxxxxxxxxx>
> > > Cc: Thomas Zimmermann <tzimmermann@xxxxxxx>
> > > Cc: David Airlie <airlied@xxxxxxxxx>
> > > Cc: Simona Vetter <simona@xxxxxxxx>
> > > Cc: stable <stable@xxxxxxxxxx>
> > > Assisted-by: gkh_clanker_2000
> > > Signed-off-by: Greg Kroah-Hartman <gregkh@xxxxxxxxxxxxxxxxxxx>
> > Also acked by Sima and Maxime via IRC
> >
> > https://people.freedesktop.org/~cbrill/dri-log/?channel=dri-devel&highlight_names=&date=2026-04-01&show_html=true
> >
> > Acked-by: Maxime Ripard <mripard@xxxxxxxxxx>
> > Reviewed-by: Simona Vetter <simona@xxxxxxxx>
> Great, thanks, I'm assuming some drm developer can pick this up then?

Already done. It should show up in the next -rc

> greg k-h

--
--
Thomas Zimmermann
Graphics Driver Developer
SUSE Software Solutions Germany GmbH
Frankenstr. 146, 90461 Nürnberg, Germany, www.suse.com
GF: Jochen Jaser, Andrew McDonald, Werner Knoblich, (HRB 36809, AG Nürnberg)